Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 05:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 1.2MB
- Sample260910-gbttmsgr3z
- SHA256 8735ad484b534f285b323252d2d669f8aa837e8bcebb7ead2743dbb65b345185
- MD5 56a88c8dbbb6871dec9580cca033173d
- SHA1 eceb4a2e8edaf093b973632162b385034d662ec6
- SHA512 6a3ede055f3be76f98498b26ac6354da16def9e58e5573ae50d8f7c5aa310a754cbe330713568dd0a386a097d4b45f6cf90442a95747bc9f60549ff0b889d374
- SSDEEP 24576:jIaE9QMo1EzuuvSHEjCjsqjnhMgeiCl7G0nehbGZpbD:8NQMo1EzewCnDmg27RnWGj
- TLSH T14A559D2225DDBCB6E4B20270677F97E5871EEC200765C4CF63C4555A967C8E23E32BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-08_56a88c8dbbb6871dec9580cca033173d_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5516